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- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
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3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
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1 . Amended claims 1-6,8-1 3 are pending. Claim 7 is canceled 

2. This application claims the priority of 6/29/1998 (not 3/10/1997 as the previous Office 
Action indicated). 

Response to Arguments 

3. Applicant's arguments with respect to claims 1-6,8-13 have been considered but are moot 
in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC§102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 1-6,8-13 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Potterveld et al [Potterveld 5,878,431]. 

4. As per claim 1, Potterveld discloses A policy enforcement system for enforcing policies 
defining what actions belonging to a first type thereof first entities (i.e.: resource) defined in a 
computer system may perform on second entities defined in the computer system [Potterveld, the 
application specific rules or enforcers verify the validity of the resources or entities, col 1 1 lines 
15-35; col 3 lines 40-60], the policy enforcement system being of the type that comprising: 

a policy server , the policy server comprising a policy database of the policies and 
extensible configured to include policies for actions belonging to an additional type thereof , a 
policy including any action that a user may perform on an information resource [Potterveld, 
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enterprise database, col 5 lines 25-40; servers, col 6 lines 20-33; new resource is added, col 13 
line 50]; and 

a policy enforcer (i.e.: the application specific rules or enforcers) , the policy enforcer 
configured to control performance of the first type of action [Potterveld, resource aspect type, col 
8 lines 1-11]; 

communicate a request to perform an action of the first type to the policy server 
[Potterveld, request services, col 9 line 60-col 10 line 10]; and 

permit performance of the action [Potterveld, permit roles, col 11 lines 1-12] only if a 
response from the policy server indicates that the policies permit the action (i.e.: notification) 
[Potterveld, notication receivers, col 1 1 lines 35-50], and 

the policy enforcer being extensible configured to comprise an additional policy enforcer, 
which controls performance of actions of the additional type on an information resource 
[Potterveld, extensible and configurable rules, col 9 lines 25-35; new association, col 10 lines 20- 
28;new resource name, new object, col 12 lines 14-45]. 

5. Claims 8, 10 contain the similar limitations set forth in claim 1 . Therefore claims 8,10 are 
rejected for the same rationale set forth in claim 1 . 

6. As per claim 2, Potterveld discloses the policy database is of the class wherein policies 
are defined as sets of the first entities and sets of the second entities and the policy database is 
further extensible to include an additional type of the first entities and/or an additional type of the 
second entities [Poliquin, additional resource aspect type, col 13 lines 35-65]. 
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7. As per claim 3, Potterveld discloses an action attribute may be associated in the database 
with a set of the first entities and/or a set of the second entities, the action attribute specifying a 
manner in which an action specified in a given policy is to be performed with regard entities in 
the set of first entities and/or entities in the set of second entities [Potterveld, additional resource 
aspect type, col 13 lines 35-65]. 

8. As per claim 4, Potterveld discloses the database is further extensible to include an 
additional type of action attributes [Potterveld, enterprise database, col 5 lines 25-40]. 

9. As per claim 5, Potterveld discloses the additional policy enforcer controls performance 
of actions at a level of the computer system that is different from the level at which the policy 
enforcer controls performance of actions [Potterveld, new resource names, col 12 lines 14-21. 

10. As per claim 6, Potterveld discloses at least one of the policy enforcers is at a location in 
the computer system that is remote from the policy server [Potterveld, servers, col 6 lines 20-33]. 

11. As per claim 9, Potterveld discloses the further condition is a time interval specification 
associated with the given policy, the time interval specification specifying an interval of time 
during which entities belonging to the given set of first entities specified in the given policy may 
perform the given action specified therein on entities belonging to the given set of second entities 
specified therein [Potterveld, scheduling, col 2 lines 22-38]. 
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12. As per claim 11, Potterveld discloses the database is extensible to include new types of 
action attributes [Potterveld, additional resource aspect type, col 13 lines 35-65], 



13. As per claim 12, Potterveld discloses an action attribute condition is associated in the 
database with an action attribute for the given policy, the action attribute condition determining 
whether a requesting entity belonging to the given set of first entities can perform the given 
action as specified in the action attribute on an entity in the given set of second entities at the 
time the requesting entity makes the request [Potterveld, trigger condition, col 1 1 lines 35-40]. 



14. As per claim 13, Potterveld discloses the additional type of action is defined by a user of 
the policy enforcement system and the policy enforcement system includes a user interface for 
extending the policy database by adding the user-defined additional type of action to the policy 
database [Potterveld, additional resource aspect type, col 13 lines 35-65]. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to examiner Thong Vu, whose telephone number is (571)-272-3904. 
The examiner can normally be reached on Monday-Thursday from 6:00AM- 3:30PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell, can be reached at (571) 272-3868. The fax number for the 
organization where this application or proceeding is assigned is 571-273-8300 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval EPAIRI system. Status information for published applications 
may be obtained from either Private PMR or Public PMR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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